Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 00:58:53.706 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59170 10 6452 1 2025-09-03 00:59:20.141 00:00:10.363 TCP 23.104.0.1:33562 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:59:53.876 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40050 10 6452 1 2025-09-03 01:00:20.542 00:00:10.364 TCP 23.104.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:00:54.101 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-09-03 01:01:20.947 00:00:10.457 TCP 23.104.0.1:57856 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:01:54.326 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50616 10 6452 1 2025-09-03 01:02:23.096 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:02:22.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:02:21.442 00:00:10.364 TCP 23.104.0.1:33540 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:02:54.510 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51762 10 6452 1 2025-09-03 00:59:22.657 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:03:21.847 00:00:10.379 TCP 23.104.0.1:50946 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:03:54.690 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55264 10 6452 1 2025-09-03 01:00:22.658 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:04:22.267 00:00:10.360 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:04:54.904 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-09-03 01:05:22.668 00:00:10.322 TCP 23.104.0.1:54826 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:05:55.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41124 10 6452 1 2025-09-03 01:06:23.030 00:00:10.368 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:06:55.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-09-03 01:07:22.989 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:07:22.844 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:07:23.437 00:00:10.371 TCP 23.104.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:07:55.550 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54796 10 6452 1 2025-09-03 01:08:23.848 00:00:10.346 TCP 23.104.0.1:57396 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:08:55.767 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-09-03 01:05:22.660 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:09:24.232 00:00:10.323 TCP 23.104.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:09:56.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6452 1 2025-09-03 01:06:22.658 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:10:24.591 00:00:10.363 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:10:56.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49826 10 6452 1 2025-09-03 01:11:24.996 00:00:10.327 TCP 23.104.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:11:56.562 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-09-03 01:12:23.059 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:12:22.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:12:25.362 00:00:10.319 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:12:56.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53680 10 6452 1 2025-09-03 01:13:25.721 00:00:10.377 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:13:56.979 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6452 1 2025-09-03 01:14:26.143 00:00:10.366 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:14:57.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45644 10 6452 1 2025-09-03 01:11:22.661 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:15:26.549 00:00:10.359 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:15:57.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-09-03 01:12:22.658 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:16:26.945 00:00:10.374 TCP 23.104.0.1:53532 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:16:57.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57066 10 6452 1 2025-09-03 01:17:23.168 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:17:23.581 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:17:27.359 00:00:10.363 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:17:57.848 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-09-03 01:18:27.761 00:00:10.331 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:18:58.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-09-03 01:19:28.135 00:00:10.325 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:19:58.292 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-09-03 01:20:28.498 00:00:10.358 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:20:58.473 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46070 10 6452 1 2025-09-03 01:17:22.662 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:21:28.900 00:00:10.345 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:21:58.706 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-09-03 01:22:23.487 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:22:23.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:18:22.660 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:22:29.288 00:00:10.669 TCP 23.104.0.1:38758 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:22:58.926 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52724 10 6452 1 2025-09-03 01:23:29.997 00:00:10.361 TCP 23.104.0.1:57254 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:23:59.133 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-09-03 01:24:30.391 00:00:10.368 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:24:59.350 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33708 10 6452 1 2025-09-03 01:25:30.795 00:00:10.360 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:25:59.567 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-09-03 01:26:31.192 00:00:10.364 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:26:59.774 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47306 10 6452 1 2025-09-03 01:27:23.150 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:23:22.664 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:27:23.453 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:27:31.595 00:00:10.369 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:27:59.987 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 10 6452 1 2025-09-03 01:24:22.662 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:28:32.002 00:00:10.363 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:29:00.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38772 10 6452 1 2025-09-03 01:29:32.402 00:00:10.333 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:30:00.419 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6452 1 2025-09-03 01:30:32.768 00:00:10.370 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:31:00.638 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35588 10 6452 1 2025-09-03 01:31:33.177 00:00:10.364 TCP 23.104.0.1:60448 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:32:00.849 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33730 10 6452 1 2025-09-03 01:32:23.687 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:32:23.785 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:32:33.575 00:00:10.360 TCP 23.104.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:33:01.076 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45604 10 6452 1 2025-09-03 01:29:22.666 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:33:33.976 00:00:10.324 TCP 23.104.0.1:58730 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:34:01.290 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-09-03 01:30:22.662 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:34:34.342 00:00:10.365 TCP 23.104.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:35:01.466 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56510 10 6452 1 2025-09-03 01:35:34.747 00:00:10.370 TCP 23.104.0.1:51160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:36:01.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40996 10 6452 1 2025-09-03 01:36:35.155 00:00:10.325 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:37:01.887 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48366 10 6452 1 2025-09-03 01:37:23.483 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:37:23.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:37:35.516 00:00:10.368 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:38:02.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-09-03 01:38:35.922 00:00:10.389 TCP 23.104.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:39:02.333 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-09-03 01:35:22.664 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:39:36.343 00:00:10.369 TCP 23.104.0.1:45534 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:40:02.520 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46586 10 6452 1 2025-09-03 01:36:22.663 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:40:36.747 00:00:10.414 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:41:02.747 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54076 10 6452 1 2025-09-03 01:41:37.203 00:00:10.359 TCP 23.104.0.1:49714 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:42:02.965 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-09-03 01:42:23.607 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:42:23.666 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:42:37.601 00:00:10.320 TCP 23.104.0.1:58240 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:43:03.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38280 10 6452 1 2025-09-03 01:43:37.962 00:00:10.367 TCP 23.104.0.1:36930 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:44:03.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-09-03 01:44:38.366 00:00:10.363 TCP 23.104.0.1:45260 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:45:03.607 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34290 10 6452 1 2025-09-03 01:41:22.667 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:45:38.764 00:00:10.374 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:46:03.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44472 10 6452 1 2025-09-03 01:42:22.665 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:46:39.177 00:00:11.150 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:47:03.985 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-09-03 01:47:23.731 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:47:23.786 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:47:40.369 00:00:10.364 TCP 23.104.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:48:04.213 00:00:10.410 TCP 1.101.0.1:3000 -> 22.102.0.1:47248 10 6452 1 2025-09-03 01:48:40.770 00:00:10.369 TCP 23.104.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:49:04.667 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6452 1 2025-09-03 01:49:41.173 00:00:10.368 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:50:04.885 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44272 10 6452 1 2025-09-03 01:50:41.577 00:00:10.363 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:51:05.116 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60834 10 6452 1 2025-09-03 01:47:22.670 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:51:41.974 00:00:10.328 TCP 23.104.0.1:44358 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:52:05.332 00:00:10.674 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 10 6452 1 2025-09-03 01:52:23.898 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:52:23.826 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:48:22.666 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 01:52:42.343 00:00:10.337 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:53:06.068 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-09-03 01:53:42.728 00:00:10.378 TCP 23.104.0.1:42498 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:54:06.283 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-09-03 01:54:43.143 00:00:10.325 TCP 23.104.0.1:40360 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:55:06.523 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41730 10 6452 1 2025-09-03 01:55:43.509 00:00:10.363 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:56:06.729 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58416 10 6452 1 2025-09-03 01:56:43.907 00:00:10.326 TCP 23.104.0.1:57168 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:57:06.898 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37900 10 6452 1 2025-09-03 01:57:24.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 01:57:23.838 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 01:53:22.670 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 01:57:44.276 00:00:10.367 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:58:07.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-09-03 01:54:22.667 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1095, avg pps: 0, avg bpp: 318 Time window: 2025-09-03 00:58:53 - 2025-09-03 01:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0028s Wall: 0.0023s flows/second: 71089.9 Runtime: 0.0023s